$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/5u1YZUjr_ReSzpbbvbULKkSKsfE.roa File: 5u1YZUjr_ReSzpbbvbULKkSKsfE.roa (raw, json) Hash identifier: Pt2FW1S6kF3dC3vm9B3Nv99jvqi3sDnlIQg3D+3vtI4= Subject key identifier: E6:ED:58:65:48:EB:FD:17:92:CE:96:DB:BD:B5:0B:2A:44:8A:B1:F1 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0BAA Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/5u1YZUjr_ReSzpbbvbULKkSKsfE.roa Signing time: Fri 01 Sep 2023 09:44:06 +0000 ROA not before: Fri 01 Sep 2023 09:44:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 2402:c340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 21:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Sep 1 09:44:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E6ED586548EBFD1792CE96DBBDB50B2A448AB1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:fb:0e:37:6d:29:8a:dc:db:28:ee:20:ce: 1e:d4:95:6d:ad:a6:f7:e8:e6:36:ca:bb:5e:f5:49: 96:3a:ca:61:b5:15:9f:cb:85:7f:5e:f8:d4:9b:0a: 06:e4:c8:2f:fa:a3:83:e8:ea:96:3e:b3:19:59:2e: 05:92:b4:08:e3:d8:aa:2c:60:ab:86:66:73:b5:30: 2d:6f:49:a8:72:c2:0d:3e:ca:bb:47:c0:8a:85:7d: 4c:db:8d:f5:dc:5d:66:61:b9:74:0c:f7:60:30:cd: 9f:99:ef:4e:41:cb:6a:98:50:c1:6c:66:d8:b3:6e: b4:fc:c1:15:4f:86:a6:9f:6e:16:01:cb:c2:21:67: e5:8b:13:17:7e:b7:4f:13:79:e5:f8:89:82:ca:3c: 14:bf:bb:98:f7:a5:83:6a:50:9b:86:f5:31:58:88: 69:16:9d:3d:23:90:6d:8b:ea:25:cc:0c:86:14:6c: 9a:0a:7f:ff:b6:3f:d0:9c:0a:11:7f:e8:cd:a8:6d: 1c:09:c8:cb:5e:9e:2c:8f:b2:be:62:43:4f:69:1f: f6:f0:58:af:8c:9f:bb:28:67:f2:42:ca:68:cc:62: f7:81:93:0d:17:20:60:54:8e:9e:5b:d2:dc:de:3e: eb:d0:d6:20:32:a1:b5:87:a5:80:f9:0a:cb:4f:8f: d5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:ED:58:65:48:EB:FD:17:92:CE:96:DB:BD:B5:0B:2A:44:8A:B1:F1 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/5u1YZUjr_ReSzpbbvbULKkSKsfE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:c340::/32 Signature Algorithm: sha256WithRSAEncryption 41:12:76:23:69:3d:52:f3:66:4a:b8:29:3e:05:8a:95:f0:51: 9b:57:ef:03:37:b0:26:e5:a4:4e:9e:0e:2b:18:a4:ca:17:f3: 3e:c6:9d:30:d4:a8:3d:30:23:aa:cb:62:d6:d3:15:b7:ad:23: 82:a9:43:6e:ed:dc:c1:6e:40:bd:ab:8f:cd:13:e6:47:ac:02: be:6a:b7:9c:87:94:db:7a:f3:4d:6d:d5:1c:13:b7:f8:f2:cc: c3:5b:87:18:33:b7:47:9e:64:6f:1f:96:c0:b1:1c:8e:87:02: 78:e7:b3:88:07:66:5e:3f:e3:c6:c3:ad:e0:ee:25:ee:00:ab: bf:50:a9:85:8f:92:7e:e1:b8:88:3b:ae:b5:71:41:28:91:6c: 40:3c:8b:7f:f1:4f:47:fe:9d:ea:1f:1e:43:5a:8b:ca:e6:82: 58:54:82:0e:cf:d7:99:0c:03:03:03:39:d2:f6:77:90:94:97: b1:ca:19:a0:3b:e8:d5:61:29:46:ed:d9:1d:fb:fc:90:d4:b4: 71:30:d1:4a:5b:38:27:63:05:70:fa:1c:e0:1a:dc:ca:76:4e: 43:5a:f5:f3:3e:29:38:4a:0d:b1:41:f8:20:1e:66:18:26:4a: fe:9a:f9:b9:2d:73:d8:41:28:2c:01:89:25:25:87:76:36:ed: 3c:87:bc:fa -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICC6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMzA5MDEw OTQ0MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU2RUQ1ODY1NDhFQkZE MTc5MkNFOTZEQkJEQjUwQjJBNDQ4QUIxRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh6/sON20pitzbKO4gzh7UlW2tpvfo5jbKu171SZY6ymG1FZ/L hX9e+NSbCgbkyC/6o4Po6pY+sxlZLgWStAjj2KosYKuGZnO1MC1vSahywg0+yrtH wIqFfUzbjfXcXWZhuXQM92AwzZ+Z705By2qYUMFsZtizbrT8wRVPhqafbhYBy8Ih Z+WLExd+t08TeeX4iYLKPBS/u5j3pYNqUJuG9TFYiGkWnT0jkG2L6iXMDIYUbJoK f/+2P9CcChF/6M2obRwJyMteniyPsr5iQ09pH/bwWK+Mn7soZ/JCymjMYveBkw0X IGBUjp5b0tzePuvQ1iAyobWHpYD5CstPj9XdAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQU5u1YZUjr/ReSzpbbvbULKkSKsfEwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HLzV1MVlaVWpyX1Jl U3pwYmJ2YlVMS2tTS3NmRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAsNAMA0GCSqGSIb3DQEBCwUAA4IBAQBBEnYjaT1S82ZKuCk+BYqV8FGb V+8DN7Am5aROng4rGKTKF/M+xp0w1Kg9MCOqy2LW0xW3rSOCqUNu7dzBbkC9q4/N E+ZHrAK+arech5TbevNNbdUcE7f48szDW4cYM7dHnmRvH5bAsRyOhwJ457OIB2Ze P+PGw63g7iXuAKu/UKmFj5J+4biIO661cUEokWxAPIt/8U9H/p3qHx5DWovK5oJY VIIOz9eZDAMDAznS9neQlJexyhmgO+jVYSlG7dkd+/yQ1LRxMNFKWzgnYwVw+hzg GtzKdk5DWvXzPik4Sg2xQfggHmYYJkr+mvm5LXPYQSgsAYklJYd2Nu08h7z6 -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org